---
typeId: req
recordId: benac-key-001
fields:
  title: Key lifecycle support
  statement: Benac shall support key generation, import, export or backup where
    allowed, rotation, revocation, compromise marking, and compromise recovery
    for Station, user, and agent principals.
  rationale: Long-lived decentralized systems need recoverable and revocable identity.
  verification: Key lifecycle test flows; revoked principal cannot satisfy future
    policy unless explicitly allowed.
  testable: true
  status: draft
  area: BENAC-KEY
  sourceDocument: /home/johnb/Downloads/benac_syrs_v0_4_integrated_authentication.md
  sourceVersion: v0.4
  sourceSections:
    - 10.1 Cryptographic identity, content identity, and provenance foundation
  order: 13
---
